$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa File: ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa (raw, json) Hash identifier: uFZ41DyPHTnpJLbLiNoDqQ0iKptDUmTPhKWxDcK+0hU= Subject key identifier: 11:EA:8A:90:48:A4:3C:E5:FD:CB:CF:E6:96:21:69:E1:78:5C:DA:3A Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F432858471AB9EBEFD74248B92FFD2BC0 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa Signing time: Wed 04 Sep 2024 17:05:35 +0000 ROA not before: Wed 04 Sep 2024 17:05:35 +0000 ROA not after: Tue 03 Dec 2024 18:05:35 +0000 asID: 33724 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:b9:eb:ef:d7:42:48:b9:2f:fd:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Sep 4 17:05:35 2024 GMT Not After : Dec 3 18:05:35 2024 GMT Subject: CN=c93e13c7-3548-4bc5-bfa3-58610c0cf394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f8:9a:9b:0b:a0:3f:19:2a:5f:75:32:d4:f4: a3:9b:42:22:88:58:e4:23:14:8c:a7:9c:27:90:78: 54:d5:df:f3:72:a5:8e:7e:cd:2c:d0:a6:04:18:ad: 47:2d:34:37:ab:80:12:05:32:3b:88:f6:c4:66:60: a2:08:6b:e4:cb:dc:20:21:48:93:64:c7:f5:f0:ee: 1e:aa:21:df:60:91:48:6f:75:d6:db:26:52:9f:81: 4d:f2:4c:de:ce:04:13:3e:2e:6f:7a:6c:e5:12:f9: 69:05:0d:3a:86:2b:53:55:c0:e7:4a:e3:64:f2:74: ae:4f:03:44:53:82:04:96:19:49:a1:1b:05:c7:5c: c4:8c:70:9e:86:73:03:85:3f:ad:d6:1c:4c:59:7b: 6a:12:d0:a2:6d:db:19:2a:5d:fa:03:7d:53:ad:5b: 65:d4:dd:a9:86:c6:93:e6:09:19:cd:30:62:2e:d2: 06:2e:ef:4c:c1:d2:50:1b:a2:a3:4b:8f:bd:a2:30: c1:34:5d:1b:53:6b:75:5d:87:47:9a:b6:90:40:97: 15:69:e5:b3:04:84:37:5f:f6:ef:85:f9:df:84:55: af:49:47:1c:0f:69:35:5f:30:f4:d1:2c:fd:0e:72: 8e:d2:49:cc:13:d3:5c:72:22:92:81:64:4f:8d:0f: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EA:8A:90:48:A4:3C:E5:FD:CB:CF:E6:96:21:69:E1:78:5C:DA:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:63:6c:9c:e4:93:ac:38:db:e7:c5:06:6c:d6:75:55:2a:75: 9c:43:9e:0f:9c:5f:93:56:4a:74:a3:fd:52:6c:8e:fa:27:3f: d5:40:45:e7:c3:7c:0e:14:83:6c:93:be:57:55:1e:34:eb:94: f9:b3:7b:21:00:3d:fd:38:2f:f1:20:04:9d:d2:b4:a8:78:72: 5b:7b:fc:b8:23:19:51:26:f8:e4:27:08:a5:aa:9c:95:03:33: 5a:39:be:1f:ce:4d:c2:05:fa:83:ba:d1:b4:29:01:42:8f:5d: 8e:34:2c:ed:7a:e6:c2:ea:53:2e:44:6e:c4:99:0a:e1:60:ff: 4f:dc:e5:2f:89:12:a1:34:14:cd:71:24:cf:e7:1c:b9:c9:e3: 8f:80:f3:42:01:1d:76:e9:95:d2:19:bf:81:f7:af:7c:82:6d: 45:77:24:35:00:5f:03:c0:5c:c7:7b:37:d2:8b:32:b1:6f:07: 46:95:56:46:b2:d9:65:ee:53:9c:6d:24:d2:e1:54:ac:30:8f: 1d:7e:47:da:87:10:d0:c9:b8:df:e5:24:0b:4c:6c:14:28:23: ae:55:14:3f:a6:68:ef:5c:aa:a2:7e:fb:6c:ab:b1:cc:dc:2f: fd:36:e4:c5:74:85:4e:0d:ca:ec:73:bf:29:00:53:24:96:25: 28:95:20:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcauevv10JIuS/9K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI0MDkwNDE3MDUzNVoXDTI0MTIwMzE4MDUzNVowLzEtMCsGA1UEAxMk YzkzZTEzYzctMzU0OC00YmM1LWJmYTMtNTg2MTBjMGNmMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfiamwugPxkqX3Uy1PSjm0IiiFjkIxSMp5wn kHhU1d/zcqWOfs0s0KYEGK1HLTQ3q4ASBTI7iPbEZmCiCGvky9wgIUiTZMf18O4e qiHfYJFIb3XW2yZSn4FN8kzezgQTPi5vemzlEvlpBQ06hitTVcDnSuNk8nSuTwNE U4IElhlJoRsFx1zEjHCehnMDhT+t1hxMWXtqEtCibdsZKl36A31TrVtl1N2phsaT 5gkZzTBiLtIGLu9MwdJQG6KjS4+9ojDBNF0bU2t1XYdHmraQQJcVaeWzBIQ3X/bv hfnfhFWvSUccD2k1XzD00Sz9DnKO0knME9NcciKSgWRPjQ9CpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHqipBIpDzl/cvP5pYhaeF4XNo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2U1YTEyMTQtZWQ0Yi0z OTdmLTkxZWQtNDk2MWMwOWI3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtjbJzkk6w42+fFBmzWdVUqdZxDng+cX5NWSnSj/VJsjvonP9VARefD fA4Ug2yTvldVHjTrlPmzeyEAPf04L/EgBJ3StKh4clt7/LgjGVEm+OQnCKWqnJUD M1o5vh/OTcIF+oO60bQpAUKPXY40LO165sLqUy5EbsSZCuFg/0/c5S+JEqE0FM1x JM/nHLnJ44+A80IBHXbpldIZv4H3r3yCbUV3JDUAXwPAXMd7N9KLMrFvB0aVVkay 2WXuU5xtJNLhVKwwjx1+R9qHENDJuN/lJAtMbBQoI65VFD+maO9cqqJ++2yrsczc L/025MV0hU4NyuxzvykAUySWJSiVIOw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:48 2024 by rpki-client on console-fra.rpki-client.org